agents-pkg 0.6.1 → 0.8.0

package/dist/lib/source-dir.js

@@ -1,64 +1,68 @@
 /**
  * Resolve a source (GitHub owner/repo, git URL, or local path) to a local directory path.
  * For remote sources, clones to a temp directory; caller must call cleanup() when done.
+ *
+ * Parsing of `source` (local vs. git, ref extraction) lives in `source-parser.ts`; this
+ * module only does filesystem/network work (stat a local path, or clone a git remote).
  */
-import { resolve } from 'path';
 import { mkdtemp, rm, stat } from 'fs/promises';
 import { join } from 'path';
 import { tmpdir } from 'os';
 import { spawnSync } from 'child_process';
-function isLocalPath(input) {
-    const t = input.trim();
-    return (t.startsWith('./') ||
-        t.startsWith('../') ||
-        t === '.' ||
-        t === '..' ||
-        t.startsWith('/') ||
-        /^[a-zA-Z]:[/\\]/.test(t));
+import { parseSource } from './source-parser.js';
+const DEFAULT_CLONE_TIMEOUT_MS = 300_000;
+function getCloneTimeoutMs() {
+    const raw = process.env.AGENTS_PKG_CLONE_TIMEOUT_MS;
+    if (!raw)
+        return DEFAULT_CLONE_TIMEOUT_MS;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_CLONE_TIMEOUT_MS;
 }
 /**
- * SSH-style URL without git@ prefix: host:path (e.g. git.naspersclassifieds.com:olxeu/ecosystem/tooling/ai-engineering-kit.git).
- * Single colon, host-like left part, path-like right part.
+ * Clone `url` (optionally at `ref`) into a fresh temp directory and return its path.
+ * Caller owns the returned directory and should remove it when done.
  */
-function isSshStyleUrl(input) {
-    const colonIdx = input.indexOf(':');
-    if (colonIdx <= 0 || colonIdx !== input.lastIndexOf(':'))
-        return false;
-    const host = input.slice(0, colonIdx);
-    const path = input.slice(colonIdx + 1);
-    const hostLooksValid = host.includes('.') || host === 'github' || host === 'gitlab';
-    const pathLooksValid = path.length > 0 && (path.includes('/') || path.endsWith('.git'));
-    return hostLooksValid && pathLooksValid;
-}
-function isGitUrl(input) {
-    const t = input.trim();
-    return (t.startsWith('http://') ||
-        t.startsWith('https://') ||
-        t.startsWith('git@') ||
-        isSshStyleUrl(t));
-}
-/**
- * Convert shorthand to HTTPS clone URL.
- * owner/repo -> https://github.com/owner/repo.git
- * gitlab.com/owner/repo -> https://gitlab.com/owner/repo.git
- * Other hosts require a full git URL.
- */
-function ownerRepoToUrl(ownerRepo) {
-    const trimmed = ownerRepo.trim();
-    if (trimmed.includes(':'))
-        return '';
-    const parts = trimmed.split('/').filter(Boolean);
-    if (parts.length === 2) {
-        const [owner, repo] = parts;
-        if (owner.includes('.'))
-            return '';
-        return `https://github.com/${owner}/${(repo ?? '').replace(/\.git$/, '')}.git`;
+export async function cloneRepo(url, ref) {
+    const tempDir = await mkdtemp(join(tmpdir(), 'agents-pkg-'));
+    const cloneArgs = [
+        // Never smudge git-lfs content on checkout: avoids hard failures when git-lfs isn't installed.
+        '-c',
+        'filter.lfs.required=false',
+        '-c',
+        'filter.lfs.smudge=',
+        '-c',
+        'filter.lfs.clean=',
+        '-c',
+        'filter.lfs.process=',
+        'clone',
+        '--depth',
+        '1',
+        ...(ref ? ['--branch', ref] : []),
+        url,
+        tempDir,
+    ];
+    const result = spawnSync('git', cloneArgs, {
+        stdio: ['ignore', 'pipe', 'pipe'],
+        encoding: 'utf-8',
+        timeout: getCloneTimeoutMs(),
+        env: {
+            ...process.env,
+            // Never hang on an auth prompt; fail fast instead.
+            GIT_TERMINAL_PROMPT: '0',
+            GIT_LFS_SKIP_SMUDGE: '1',
+        },
+    });
+    const target = ref ? `${url} (ref: ${ref})` : url;
+    if (result.error && result.error.code === 'ETIMEDOUT') {
+        await rm(tempDir, { recursive: true, force: true }).catch(() => { });
+        throw new Error(`Timed out cloning ${target} after ${getCloneTimeoutMs()}ms`);
     }
-    if (parts.length === 3 && (parts[0] === 'github.com' || parts[0] === 'gitlab.com')) {
-        const [host, owner, repo] = parts;
-        return `https://${host}/${owner}/${(repo ?? '').replace(/\.git$/, '')}.git`;
+    if (result.status !== 0) {
+        await rm(tempDir, { recursive: true, force: true }).catch(() => { });
+        const stderr = (result.stderr || '').trim();
+        throw new Error(`Failed to clone ${target}: ${stderr || result.error?.message || 'unknown error'}`);
     }
-    return '';
+    return tempDir;
 }
 /**
  * Resolve source to a local directory. For remote sources, clones to a temp dir.
@@ -69,9 +73,9 @@ export async function resolveSourceToDir(source) {
     if (!trimmed) {
         throw new Error('Source is required');
     }
-    // Local path
-    if (isLocalPath(trimmed)) {
-        const abs = resolve(trimmed);
+    const parsed = parseSource(trimmed);
+    if (parsed.type === 'local') {
+        const abs = parsed.localPath ?? parsed.url;
         try {
             const st = await stat(abs);
             if (!st.isDirectory()) {
@@ -85,31 +89,11 @@ export async function resolveSourceToDir(source) {
         }
         return { path: abs };
     }
-    // Remote: git URL or owner/repo
-    let cloneUrl;
-    if (isGitUrl(trimmed)) {
-        cloneUrl = trimmed;
-    }
-    else {
-        cloneUrl = ownerRepoToUrl(trimmed);
-        if (!cloneUrl) {
-            throw new Error(`Invalid source: ${trimmed}. Use a local path, owner/repo, or a git URL.`);
-        }
-    }
-    const tempDir = await mkdtemp(join(tmpdir(), 'agents-pkg-'));
-    const result = spawnSync('git', ['clone', '--depth', '1', cloneUrl, tempDir], {
-        stdio: ['ignore', 'pipe', 'pipe'],
-        encoding: 'utf-8',
-    });
-    if (result.status !== 0) {
-        await rm(tempDir, { recursive: true, force: true }).catch(() => { });
-        const stderr = (result.stderr || '').trim();
-        throw new Error(`Failed to clone ${cloneUrl}: ${stderr || result.error?.message || 'unknown error'}`);
-    }
+    const path = await cloneRepo(parsed.url, parsed.ref);
     return {
-        path: tempDir,
+        path,
         cleanup: async () => {
-            await rm(tempDir, { recursive: true, force: true });
+            await rm(path, { recursive: true, force: true });
         },
     };
 }

package/dist/lib/source-dir.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-dir.js","sourceRoot":"","sources":["../../src/lib/source-dir.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QACnB,CAAC,KAAK,GAAG;QACT,CAAC,KAAK,IAAI;QACV,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,OAAO,cAAc,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QACvB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QACxB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,aAAa,CAAC,CAAC,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5B,IAAI,KAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,sBAAsB,KAAK,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAClC,OAAO,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,aAAa;IACb,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,gCAAgC;IAChC,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,+CAA+C,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC5E,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"source-dir.js","sourceRoot":"","sources":["../../src/lib/source-dir.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQjD,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEzC,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,wBAAwB,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAY;IACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG;QAChB,+FAA+F;QAC/F,IAAI;QACJ,2BAA2B;QAC3B,IAAI;QACJ,oBAAoB;QACpB,IAAI;QACJ,mBAAmB;QACnB,IAAI;QACJ,qBAAqB;QACrB,OAAO;QACP,SAAS;QACT,GAAG;QACH,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG;QACH,OAAO;KACR,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE;QACzC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,iBAAiB,EAAE;QAC5B,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,mDAAmD;YACnD,mBAAmB,EAAE,GAAG;YACxB,mBAAmB,EAAE,GAAG;SACzB;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAElD,IAAI,MAAM,CAAC,KAAK,IAAK,MAAM,CAAC,KAA+B,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,UAAU,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEpC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/source-parser.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Pure parsing of a `source` string (as passed to `add-plugin` / stored in the lock file)
+ * into a structured description of where to get the code from: a local directory, or a
+ * git remote (with an optional ref) to clone.
+ *
+ * No filesystem or network access happens here; see `source-dir.ts` for resolution.
+ *
+ * Modeled after vercel-labs/skills' `parseSource`, with two deliberate deviations for
+ * agents-pkg (documented at their point of divergence below):
+ *   - No skill-filter support (`#ref@skill` / `owner/repo@skill`); we select plugins via
+ *     separate CLI args, so anything after `@` in a fragment is ignored.
+ *   - No subpath support; a `tree/<ref>/<subpath>` (or gitlab `-/tree/<ref>/<subpath>`) only
+ *     ever yields a ref, the subpath is dropped, since our installer always reads
+ *     `.cursor-plugin/marketplace.json` at the repo root.
+ */
+export interface ParsedSource {
+    type: 'local' | 'github' | 'gitlab' | 'git';
+    url: string;
+    ref?: string;
+    localPath?: string;
+}
+/**
+ * Whether `input` (the base, with any `#ref` already stripped) "looks like" a git source,
+ * i.e. the `#` fragment (if present) should be treated as a git ref rather than left as
+ * part of an opaque string.
+ *
+ * DEVIATION from vercel-labs/skills: they only treat http(s) URLs as git-like when they
+ * are github.com/gitlab.com or end in `.git`. agents-pkg only ever resolves git remotes
+ * (there's no other kind of http(s) source), so we additionally treat any plain
+ * `https?://<host>/<path>` (with at least one path segment) as git-like. This is what
+ * makes our primary internal use case (self-hosted GitLab URLs without a `.git` suffix,
+ * e.g. `https://git.example.com/group/subgroup/repo#branch/name`) parse the `#ref`
+ * fragment correctly.
+ */
+export declare function looksLikeGitSource(input: string): boolean;
+export declare function parseSource(input: string): ParsedSource;
+//# sourceMappingURL=source-parser.d.ts.map

package/dist/lib/source-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-parser.d.ts","sourceRoot":"","sources":["../../src/lib/source-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAiCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAyBzD;AA4CD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAmFvD"}

package/dist/lib/source-parser.js

@@ -0,0 +1,214 @@
+/**
+ * Pure parsing of a `source` string (as passed to `add-plugin` / stored in the lock file)
+ * into a structured description of where to get the code from: a local directory, or a
+ * git remote (with an optional ref) to clone.
+ *
+ * No filesystem or network access happens here; see `source-dir.ts` for resolution.
+ *
+ * Modeled after vercel-labs/skills' `parseSource`, with two deliberate deviations for
+ * agents-pkg (documented at their point of divergence below):
+ *   - No skill-filter support (`#ref@skill` / `owner/repo@skill`); we select plugins via
+ *     separate CLI args, so anything after `@` in a fragment is ignored.
+ *   - No subpath support; a `tree/<ref>/<subpath>` (or gitlab `-/tree/<ref>/<subpath>`) only
+ *     ever yields a ref, the subpath is dropped, since our installer always reads
+ *     `.cursor-plugin/marketplace.json` at the repo root.
+ */
+import { resolve } from 'path';
+function isLocalPath(input) {
+    const t = input.trim();
+    return (t.startsWith('./') ||
+        t.startsWith('../') ||
+        t === '.' ||
+        t === '..' ||
+        t.startsWith('/') ||
+        /^[a-zA-Z]:[/\\]/.test(t));
+}
+/**
+ * SSH-style URL without git@ prefix: host:path (e.g. git.example.com:owner/repo.git).
+ * Single colon, host-like left part, path-like right part.
+ */
+function isSshStyleUrl(input) {
+    const colonIdx = input.indexOf(':');
+    if (colonIdx <= 0 || colonIdx !== input.lastIndexOf(':'))
+        return false;
+    const host = input.slice(0, colonIdx);
+    const path = input.slice(colonIdx + 1);
+    const hostLooksValid = host.includes('.') || host === 'github' || host === 'gitlab';
+    const pathLooksValid = path.length > 0 && (path.includes('/') || path.endsWith('.git'));
+    return hostLooksValid && pathLooksValid;
+}
+const GITHUB_TREE_RE = /^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)$/;
+const GITHUB_TREE_SUBPATH_RE = /^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)\/(.+)$/;
+const GITLAB_TREE_RE = /^(https?):\/\/([^/]+)\/(.+?)\/-\/tree\/([^/]+)$/;
+const GITLAB_TREE_SUBPATH_RE = /^(https?):\/\/([^/]+)\/(.+?)\/-\/tree\/([^/]+)\/(.+)$/;
+/**
+ * Whether `input` (the base, with any `#ref` already stripped) "looks like" a git source,
+ * i.e. the `#` fragment (if present) should be treated as a git ref rather than left as
+ * part of an opaque string.
+ *
+ * DEVIATION from vercel-labs/skills: they only treat http(s) URLs as git-like when they
+ * are github.com/gitlab.com or end in `.git`. agents-pkg only ever resolves git remotes
+ * (there's no other kind of http(s) source), so we additionally treat any plain
+ * `https?://<host>/<path>` (with at least one path segment) as git-like. This is what
+ * makes our primary internal use case (self-hosted GitLab URLs without a `.git` suffix,
+ * e.g. `https://git.example.com/group/subgroup/repo#branch/name`) parse the `#ref`
+ * fragment correctly.
+ */
+export function looksLikeGitSource(input) {
+    const t = input.trim();
+    if (isLocalPath(t))
+        return false;
+    if (t.startsWith('github:') || t.startsWith('gitlab:') || t.startsWith('git@'))
+        return true;
+    // file:// URLs are a git-clonable remote (used for local git repos in tests/CI), not a plain local path.
+    if (t.startsWith('file://'))
+        return true;
+    if (/^ssh:\/\/.+\.git$/.test(t))
+        return true;
+    if (GITHUB_TREE_RE.test(t) || GITHUB_TREE_SUBPATH_RE.test(t))
+        return true;
+    if (GITLAB_TREE_RE.test(t) || GITLAB_TREE_SUBPATH_RE.test(t))
+        return true;
+    if (/^https?:\/\/.+\.git$/.test(t))
+        return true;
+    if (t.startsWith('http://') || t.startsWith('https://')) {
+        // Extended beyond vercel-labs/skills: see doc comment above.
+        try {
+            const u = new URL(t);
+            return u.pathname.replace(/^\/+/, '').length > 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    if (isSshStyleUrl(t))
+        return true;
+    // Bare owner/repo shorthand: no colon, not starting with `.` or `/`.
+    if (!t.includes(':') && !t.startsWith('.') && !t.startsWith('/') && /^[^/]+\/[^/]+$/.test(t)) {
+        return true;
+    }
+    return false;
+}
+/** Split an optional `#ref` (or `#ref@skillFilter`, skillFilter ignored) fragment off a source string. */
+function splitFragmentRef(input) {
+    const hashIdx = input.indexOf('#');
+    if (hashIdx === -1)
+        return { base: input };
+    const base = input.slice(0, hashIdx);
+    let fragment = input.slice(hashIdx + 1).trim();
+    if (fragment.length === 0)
+        return { base };
+    const atIdx = fragment.indexOf('@');
+    if (atIdx !== -1)
+        fragment = fragment.slice(0, atIdx);
+    if (fragment.length === 0)
+        return { base };
+    let decoded = fragment;
+    try {
+        decoded = decodeURIComponent(fragment);
+    }
+    catch {
+        decoded = fragment;
+    }
+    return { base, fragmentRef: decoded };
+}
+/**
+ * Convert bare shorthand to an HTTPS clone URL.
+ * owner/repo -> https://github.com/owner/repo.git
+ * github.com/owner/repo, gitlab.com/owner/repo -> https://<host>/owner/repo.git
+ */
+function ownerRepoToUrl(ownerRepo) {
+    const trimmed = ownerRepo.trim();
+    if (trimmed.includes(':'))
+        return undefined;
+    const parts = trimmed.split('/').filter(Boolean);
+    if (parts.length === 2) {
+        const [owner, repo] = parts;
+        if (owner.includes('.'))
+            return undefined;
+        return { type: 'github', url: `https://github.com/${owner}/${(repo ?? '').replace(/\.git$/, '')}.git` };
+    }
+    if (parts.length >= 3 && (parts[0] === 'github.com' || parts[0] === 'gitlab.com')) {
+        const host = parts[0];
+        const rest = parts.slice(1);
+        const repo = rest.pop().replace(/\.git$/, '');
+        return { type: host === 'github.com' ? 'github' : 'gitlab', url: `https://${host}/${rest.join('/')}/${repo}.git` };
+    }
+    return undefined;
+}
+export function parseSource(input) {
+    const trimmed = input.trim();
+    if (isLocalPath(trimmed)) {
+        const abs = resolve(trimmed);
+        return { type: 'local', url: abs, localPath: abs };
+    }
+    // github:owner/repo / gitlab:group/sub/repo prefix shorthand, optionally with #ref.
+    if (trimmed.startsWith('github:') || trimmed.startsWith('gitlab:')) {
+        const isGithub = trimmed.startsWith('github:');
+        const rest = trimmed.slice(isGithub ? 'github:'.length : 'gitlab:'.length);
+        const { base, fragmentRef } = splitFragmentRef(rest);
+        const parts = base.split('/').filter(Boolean);
+        const repo = (parts.pop() ?? '').replace(/\.git$/, '');
+        const url = isGithub
+            ? `https://github.com/${parts.join('/')}/${repo}.git`
+            : `https://gitlab.com/${parts.join('/')}/${repo}.git`;
+        return { type: isGithub ? 'github' : 'gitlab', url, ref: fragmentRef };
+    }
+    const { base, fragmentRef } = splitFragmentRef(trimmed);
+    // Browse-URL ref extraction takes precedence over a `#ref` fragment.
+    const ghSubpath = base.match(GITHUB_TREE_SUBPATH_RE);
+    const ghBranchOnly = base.match(GITHUB_TREE_RE);
+    if (ghBranchOnly) {
+        const [, owner, repo, ref] = ghBranchOnly;
+        return { type: 'github', url: `https://github.com/${owner}/${repo}.git`, ref };
+    }
+    if (ghSubpath) {
+        const [, owner, repo, ref] = ghSubpath;
+        return { type: 'github', url: `https://github.com/${owner}/${repo}.git`, ref };
+    }
+    const glSubpath = base.match(GITLAB_TREE_SUBPATH_RE);
+    const glBranchOnly = base.match(GITLAB_TREE_RE);
+    if (glBranchOnly) {
+        const [, proto, host, repoPath, ref] = glBranchOnly;
+        return { type: 'gitlab', url: `${proto}://${host}/${repoPath}.git`, ref };
+    }
+    if (glSubpath) {
+        const [, proto, host, repoPath, ref] = glSubpath;
+        return { type: 'gitlab', url: `${proto}://${host}/${repoPath}.git`, ref };
+    }
+    // Bare owner/repo shorthand, or owner/repo prefixed with a bare github.com/gitlab.com
+    // host (no scheme). Tried before the looksLikeGitSource guard below since these forms
+    // are unambiguously our own shorthand, not a generic opaque string.
+    const shorthand = ownerRepoToUrl(base);
+    if (shorthand) {
+        return { type: shorthand.type, url: shorthand.url, ref: fragmentRef };
+    }
+    if (!looksLikeGitSource(base)) {
+        // Base doesn't look git-like: leave the `#` as part of the string (not a ref).
+        return { type: 'git', url: trimmed };
+    }
+    if (base.startsWith('git@') || isSshStyleUrl(base) || base.startsWith('ssh://') || base.startsWith('file://')) {
+        return { type: 'git', url: base, ref: fragmentRef };
+    }
+    if (base.startsWith('http://') || base.startsWith('https://')) {
+        let host = '';
+        try {
+            host = new URL(base).hostname;
+        }
+        catch {
+            host = '';
+        }
+        if (host === 'github.com') {
+            const withGit = base.endsWith('.git') ? base : `${base.replace(/\/$/, '')}.git`;
+            return { type: 'github', url: withGit, ref: fragmentRef };
+        }
+        if (host === 'gitlab.com') {
+            const withGit = base.endsWith('.git') ? base : `${base.replace(/\/$/, '')}.git`;
+            return { type: 'gitlab', url: withGit, ref: fragmentRef };
+        }
+        // Generic git host (our extension): keep URL as-is, don't force a `.git` suffix.
+        return { type: 'git', url: base, ref: fragmentRef };
+    }
+    return { type: 'git', url: base, ref: fragmentRef };
+}
+//# sourceMappingURL=source-parser.js.map

package/dist/lib/source-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-parser.js","sourceRoot":"","sources":["../../src/lib/source-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QACnB,CAAC,KAAK,GAAG;QACT,CAAC,KAAK,IAAI;QACV,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,OAAO,cAAc,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED,MAAM,cAAc,GAAG,2DAA2D,CAAC;AACnF,MAAM,sBAAsB,GAAG,iEAAiE,CAAC;AACjG,MAAM,cAAc,GAAG,iDAAiD,CAAC;AACzE,MAAM,sBAAsB,GAAG,uDAAuD,CAAC;AAEvF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,yGAAyG;IACzG,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,6DAA6D;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,qEAAqE;IACrE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0GAA0G;AAC1G,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5B,IAAI,KAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;IACrH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACrD,CAAC;IAED,oFAAoF;IACpF,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,QAAQ;YAClB,CAAC,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM;YACrD,CAAC,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAExD,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,QAAQ,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,QAAQ,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5E,CAAC;IAED,sFAAsF;IACtF,sFAAsF;IACtF,oEAAoE;IACpE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,+EAA+E;QAC/E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9G,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC;YAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC;YAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAC5D,CAAC;QACD,iFAAiF;QACjF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC"}

package/dist/lib/types.d.ts

@@ -8,7 +8,7 @@ export interface MarketplaceEntry {
     version: string;
     pluginNames: string[];
     updatedAt: string;
-    /** If true (default), symlinks go to ~/.cursor/*; if false, to project .cursor/*. */
+    /** If true (default), plugins sync to ~/.cursor/plugins/local/; if false, flatten into project .cursor/*. */
     global?: boolean;
     /** Hook entries we merged per plugin (for removal on uninstall). */
     pluginHooks?: Record<string, Array<{

package/dist/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,kIAAkI;AAClI,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3E,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,2HAA2H;IAC3H,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAChD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,kIAAkI;AAClI,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,6GAA6G;IAC7G,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3E,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,2HAA2H;IAC3H,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAChD"}

package/dist/lib/uninstall-plugin.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Remove a plugin from Cursor — global installs use plugins/local; project installs use flattened symlinks + store.
+ */
+export declare function uninstallPluginFromCursor(options: {
+    marketplaceName: string;
+    pluginName: string;
+    global: boolean;
+    cwd: string;
+    pluginHooks?: Array<{
+        hookName: string;
+        command: string;
+    }>;
+}): Promise<void>;
+//# sourceMappingURL=uninstall-plugin.d.ts.map

package/dist/lib/uninstall-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall-plugin.d.ts","sourceRoot":"","sources":["../../src/lib/uninstall-plugin.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhB"}

package/dist/lib/uninstall-plugin.js

@@ -0,0 +1,33 @@
+/**
+ * Remove a plugin from Cursor — global installs use plugins/local; project installs use flattened symlinks + store.
+ */
+import { rm } from 'fs/promises';
+import { getPluginStorePath } from './marketplace.js';
+import { getCursorAgentsDir, getCursorCommandsDir, getCursorSkillsDir, getCursorRulesDir, } from './paths.js';
+import { removeLocalPlugin } from './plugin-local.js';
+import { removeSymlinksInDirPointingUnder } from './symlink.js';
+import { removeCopiedAgentsForPlugin } from './agents-copy.js';
+import { removeHookEntries } from './hooks.js';
+export async function uninstallPluginFromCursor(options) {
+    const { marketplaceName, pluginName, global, cwd, pluginHooks } = options;
+    if (global) {
+        await removeLocalPlugin(pluginName);
+        // Also remove leftovers from agents-pkg versions that installed global plugins
+        // by flattening them into ~/.cursor/* from the marketplace store.
+    }
+    const pluginStorePath = getPluginStorePath(marketplaceName, pluginName);
+    if (pluginHooks?.length) {
+        await removeHookEntries(pluginHooks, global, cwd);
+    }
+    const cursorAgentsDir = getCursorAgentsDir(global, cwd);
+    const cursorCommandsDir = getCursorCommandsDir(global, cwd);
+    const cursorSkillsDir = getCursorSkillsDir(global, cwd);
+    const cursorRulesDir = getCursorRulesDir(global, cwd);
+    await removeCopiedAgentsForPlugin(pluginStorePath, cursorAgentsDir);
+    await removeSymlinksInDirPointingUnder(cursorAgentsDir, pluginStorePath);
+    await removeSymlinksInDirPointingUnder(cursorCommandsDir, pluginStorePath);
+    await removeSymlinksInDirPointingUnder(cursorSkillsDir, pluginStorePath);
+    await removeSymlinksInDirPointingUnder(cursorRulesDir, pluginStorePath);
+    await rm(pluginStorePath, { recursive: true, force: true }).catch(() => { });
+}
+//# sourceMappingURL=uninstall-plugin.js.map

package/dist/lib/uninstall-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall-plugin.js","sourceRoot":"","sources":["../../src/lib/uninstall-plugin.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAM/C;IACC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAE1E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACpC,+EAA+E;QAC/E,kEAAkE;IACpE,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;QACxB,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,2BAA2B,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACpE,MAAM,gCAAgC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,gCAAgC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC3E,MAAM,gCAAgC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACzE,MAAM,gCAAgC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAExE,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAAA;;GAEG;AA+BH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAsK/C"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiCH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAkK/C"}